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REMARKS 

Applicants hereby request a Pre-Appeal Brief Review (hereinafter "Request") of the 
claims finally rejected in the Final Office Action mailed February 28, 2007 ("Final Office 
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Action") and the Advisory Action mailed May 1, 2007 ("Advisory Action"). The Request is 
provided herewith in accordance with the rules set out in the OG Notice of July 12, 2005. 

Applicants submit that the rejections are based on clear errors, and that the Final Office 
Action and Advisory Opinion have failed to establish a prima facie case of obviousness with 
respect to the rejected claims. Accordingly, Applicants request review of the present application 
by an appeal conference prior to the filing of an appeal brief. In the interest of brevity and 
without waiving the right to argue additional grounds should this Petition be denied, Applicants 
will only discuss some particular errors made in the rejections of the Independent Claims. 

Independent Claims 1 and 33-35 stand rejected as unpatentable over U.S. Patent No. 
6,141,705 to Anand et al. ("Anand") in view of U.S. Patent Publication No. 2003/0014623 to 
Freed et al. ("Freed"). 

Claim 1 recites as follows: 

1 . A method of performing security processing in a computing network 
comprising a local unit having an operating system kernel executing at least one 
application program, comprising: 

receiving a first request at the operating system kernel from the application 
program to initiate a communication with a remote unit; 

providing a second request from the operating system kernel to a security offload 
component which performs security handshake processing, the second request directing 
the security offload component to secure the communication with the remote unit; and 

providing a control function in the operating system kernel for initiating operation 
of the security handshake processing by the security offload component. 

The Final Office Action asserted that Anand teaches receiving a first request at the 
operating system kernel from the application program to initiate a communication with a remote 
unit, providing a second request from the operating system kernel to a security offload 
component which performs security handshake processing, the second request directing the 
security offload component to secure the communication with the remote unit, and providing a 
control function in the operating system kernel for initiating operation of the security handshake 
processing by the security offload component. Final Office Action , pp. 2-3. In support of this 
assertion, the Final Office Action cited the passage of Anand at col. 10, lines 27-47 (Final Office 
Action, pages 2-3). 
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The Final Office Action cited Anand col. 3, lines 9-23 (Final Office Action, page 9), and 
both the Advisory Action and the Final Office Action cited Anand col. 3, lines 39-44 (Final 
Office Action, page 3; Advisory Action, Continuation Sheet). While the cited passages of 
Anand may indicate that certain security functions may be performed at NIC hardware, the Final 
Office Action and the Advisory Action mistakenly interpret the cited passages of Anand as 
teaching providing a request from an operating system kernel to a security offload component 
directing the security offload component to secure a communication with a remote unit. 

Rather, as explained in Applicants' Request For Reconsideration filed April 20, 2007, 
Anand expressly teaches that requests for security offload processing are issued by transport 
protocol drivers, which are not part of an operating system kernel. See Request For 
Reconsideration, pages 10-12. Accordingly, Anand fails to teach at least the recitations of Claim 
1 of receiving a first request at the operating system kernel from the application program to 
initiate a communication with a remote unit, providing a second request from the operating 
system kernel to a security offload component which performs security handshake processing, 
the second request directing the security offload component to secure the communication with 
the remote unit, and providing a control function in the operating system kernel for initiating 
operation of the security handshake processing by the security offload component. 

Furthermore, the Final Office Action and the Advisory Action erroneously assert that 
Anand discloses that the transport protocol driver is implemented in the operating system kernel 
Final Office Action at 10. In support, the Final Office Action cited the following passage of 
Anand: 

In a preferred embodiment of the present invention, in the Windows NT layered 
networking architecture, a transport protocol driver, or transport, is implemented with an 
appropriate program method so as to be capable of querying each of the device driver(s) 
associated with the corresponding NIC(s) connected to the computer. 

Anand, col. 3, lines 45-50. Applicants submit that the cited passage describes the "Windows NT 
layered networking architecture, " not the Windows NT operating system. Moreover, the passage 
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states that the transport protocol driver "is implemented with an appropriate program method," 
and does not indicate that the driver is somehow implemented in the operating system kernel 

The Advisory Action asserts that, as used in the above-cited passage, the term "Windows 
NT environment" refers to the Windows NT operating system. See Advisory Action, 
Continuation Sheet. Applicants submit that interpretation of Anand expressed in the Final Office 
Action and the Advisory Action clearly ignores the term "environment," which is understood by 
a skilled person not to refer to the operating system itself, but to the environment created by the 
operating system in which application programs operate. That is, in the context of computer 
systems, the term "environment" refers not to the operating system kernel, but to a computer 
interface from which various tasks can be performed. See Merriam- Webster Online Dictionary, 
definition of "environment" (http://www.m-w.com/dictionary/environment)(" 4 : a computer 
interface from which various tasks can be performed <a programming environment"). 

Attention is directed to Microsoft Knowledge Base Article 100843, available at 
http://support.microsoft.com/kb/100843. This article relates to the setting of environment 
variables in Windows NT, and states "All environment variables and the paths set in the 
AUTOEXEC.BAT file are used to create the Windows NT environment " (emphasis added). 
Clearly, the Knowledge Base article, written by the manufacturer of the Windows NT operating 
system, is not stating that an AUTOEXEC.BAT file is creating a Windows NT operating system 
kernel, as the erroneous interpretation in the Final Office Action and the Advisory Action would 
purport. The term "Windows NT environment" is used consistently with the dictionary 
definition in numerous other Knowledge Base articles. 

Furthermore, the cited passage of Anand is consistent with this interpretation of the term 
"Windows NT environment," as the cited passage discusses implementation of drivers that 
perform various tasks on a computer. Accordingly, a skilled person would not understand the 
term "Windows NT environment" used in the cited passage of Anand to refer to the Windows 
NT operating system kernel, but rather would understand the term to refer to a Windows NT 
computer interface from which various tasks can be performed. 
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This understanding of the term "Windows NT environment" is consistent with 
Applicants' understanding of the teaching of Anand, namely, that in Anand a transport protocol 
driver, as opposed to the operating system kernel, can issue requests for security offload 
processing. Anand's teaching therefore contrasts sharply with the recitations of Claim 1 that 
provide " receiving a first request at the operating system kernel from the application program to 
initiate a communication with a remote unit, providing a second request from the operating 
system kernel to a security offload component which performs security handshake processing, 
the second request directing the security offload component to secure the communication with 
the remote unit, and providing a control function in the operating system kernel for initiating 
operation of the security handshake processing by the security offload component" (emphasis 
added). Moreover, Anand does not suggest the benefits of controlling the operation of a security 
offload component using a control function in an operating system kernel rather than requiring 
such control functionality to be implemented in an application program. 

Accordingly, Applicants submit that, properly understood, Anand does not teach or 
suggest many of the recitations of Independent Claim 1. Independent Claims 33-35 are 
patentable for similar reasons based on corresponding recitations thereof. 

For at least these reasons, Applicants submit that the Final Office Action and Advisory 
Opinion have relied on a clearly erroneous understanding of Anand in formulating the rejections 
set forth therein, and have failed to establish that the combination of Anand and Freed discloses 
each and every recitation of Independent Claims 1 and 33-35. 
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